[ 
https://issues.apache.org/jira/browse/KYLIN-1234?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15058118#comment-15058118
 ] 

Shaofeng SHI commented on KYLIN-1234:
-------------------------------------

Could you set "kylin.query.security.enabled=true" in conf/kylin.properties, 
restart Kylin server and try again? This property wasn't appeared in the 
default config file, and its default value was "false" which means no security 
check. I think it need be changed to true by default. Thanks for the reporting!

> Cube ACL does not work
> ----------------------
>
>                 Key: KYLIN-1234
>                 URL: https://issues.apache.org/jira/browse/KYLIN-1234
>             Project: Kylin
>          Issue Type: Bug
>          Components: REST Service
>    Affects Versions: v1.1
>            Reporter: Marek Wiewiorka
>            Assignee: Zhong,Jason
>
> Steps to reproduce the issue:
> 1)Create a user in the LDAP not assigning it to any group
> 2)User is not able to log in the Web UI - since it's not a member of any 
> default group, nor a member of admin group.
> 3)User can however query any cube using REST api.
> ==
> I would expect that unless a user or group  has  CUBE_QUERY priv granted it 
> should not be allowed to view the data.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to